Backup MySQL error Using a password on the command line interface can be insecure

Application issues
1

Hello
I get an error message, Using a password on the command line interface can be insecure, and Bad Handshake when I try to backup MySQL

Main Screen Error
Main Screen Error1424×751 67.3 KB

I enabled “Define the connection password in environment variable” but the error still occurs

Software Version is 12.4.16 (Lite)

2

I can fix it by this Post

Thank

1 Like
3

Hi sitstandard,

It seems the issue is resolved.

If you have any other questions, please let us know.

Thank you!

1 Like
4

Thank you this issue has beed solved.

5

Good news! Please feel free to contact us on any issues or concerns.

6

Hi Alexander, I just want to piggyback on this issue. I get a similar error

9:57:44 am Failed to backup “BU” folder in “C:\BU”. #[JOB-BAK:2009] Failed create archive.
9:57:26 am Failed to backup “dm8744025311084” database with “Full” backup type: mysqldump: [Warning] Using a password on the command line interface can be insecure. mysqldump: Couldn’t execute ‘show events’: Access denied for user ‘xxxxxxxxxxxx’ to database ‘dm8744025311084’ (1044)
7

Hi ETEQ_Development,

That error message is generated by MySQL Server and we can do nothing here from our side. Please try to resolve the issue using the recommendations from the previous replies or try to find more information on the web.

Thank you and sorry for the inconvenience.

8

Hi Sir,

Hope you could help me on this error.

image
image889×567 46.3 KB

9

Hi iAmSam_Records,

Please find more details on how to resolve the issue at [DBMS-MSSQL:11006#11007] MySQL backup error: unknown variable ‘column-statistics=0’ – SQLBackupAndFTP's blog

If you have any other questions, please let us know.

Thank you and sorry for the inconvenience.

10

We get a related error from our security monitoring group: password on the commandline.
This is the observation:
cmd"" /Q /C “”““C:\Program Files (x86)\SQLBackupAndFTP\DBMS\MySql\mysql.exe”” --host ourmysqlserver --port 3306 --user ““backupandftp”” --password [REDACTED] --html --connect-timeout 30 --execute ““SHOW DATABASES;”” “”

We use the option password via environment var, but the password is still visible.

My question is:

  • Is there any plan to support more secure authentication methods, such as:
    • MySQL Login Path (mysql_config_editor )
    • --defaults-extra-file / MySQL option files
    • Windows Credential Manager
    • Any other mechanism that avoids passing passwords on the command line?

Many organizations have security policies that prohibit credentials from appearing in process command lines. At the moment, this seems to make SQLBackupAndFTP unsuitable for environments with these requirements.

I would appreciate any feedback from the development team on whether support for one of these authentication methods is planned or already available.

11

Hi Oscar,

Thanks for raising this.

We’ve addressed this in our new product, SqlBak Preview, where passwords are no longer exposed on the command line in this way.

SqlBak Preview is currently available free of charge during the Preview period, so if you’re interested, we’d really appreciate you giving it a try.

You can create your Preview account here:

Getting started:

If you have any questions or feedback, I’d be happy to help.